Privacy · Regulation Navigator™

Privacy Notice

This notice explains the information Regulation Navigator uses to provide accounts, membership access, assessments, Navigate Now, protected Anchor Actions, gifts, and the Navigator’s Log.

Last updated November 1, 2026

1. Information you provide

Depending on how you use Regulation Navigator, information you provide may include:

  • Account information: email address, authentication credentials handled through our authentication provider, age-16+ confirmation, and the Terms/Privacy document versions acknowledged when an account is created.
  • Assessment information: your 28 reflection responses, optional current-state/context information, optional checkpoint responses and performance observations, calculated Point scores, and assessment timestamps.
  • Navigator’s Log information: Navigation Point, Immediate Need, selected Anchor Action, support route, Waypoint/outcome, and any notes you choose to save.
  • Navigate Now text: the description you enter about what you need in the moment.
  • Membership and gift information: plan/access status, subscription identifiers, gift recipient email, optional recipient name/message, redemption information, and shipping information when physical materials are purchased.
  • Private access code information: redemption status associated with your account. The code itself is handled using a hashed comparison in the redemption system.

2. AI-assisted Navigate Now processing

Navigate Now currently uses an automated classification process that may send the text you enter to an AI model through our AI infrastructure in order to identify the closest Regulation Navigator Navigation Point. If that classification step is unavailable, a rules-based matching system is used as a fallback.

Navigate Now is not a clinical AI system. It is instructed not to diagnose, infer a disorder, or act as a therapist. Its suggestion is a starting point that you can reject or change.

Do not enter information you do not want processed for this purpose. Avoid unnecessary identifying details about yourself or other people.

3. Payment information

Paid purchases and recurring billing are processed through third-party payment services such as Stripe. Regulation Navigator receives information needed to connect a successful purchase or subscription to your account, such as customer, subscription, checkout, payment-status, cancellation, and plan identifiers.

Full payment-card details are entered with the payment processor rather than into Regulation Navigator’s own account forms. The payment processor’s privacy practices also apply to information it processes.

4. How we use information

  • Authenticate your account and keep your saved information connected to you.
  • Determine whether Free or paid-member features should be available.
  • Calculate and display your descriptive Seven-Point assessment results.
  • Save optional checkpoint observations and show within-person patterns over time.
  • Provide Navigate Now matching and save navigation outcomes when you choose to do so.
  • Deliver protected member artwork only after access is verified.
  • Process purchases, subscriptions, gifts, cancellations, expirations, and private-code access.
  • Prevent duplicate payment events, abuse, unauthorized access, and technical errors.
  • Operate, troubleshoot, secure, and improve the service.

5. Infrastructure and service providers

Regulation Navigator uses third-party infrastructure to operate the service. Current components include services for hosting/deployment, database and authentication, payment processing, and AI-assisted request processing. These providers may process information necessary to perform those functions and may generate standard technical records such as request, security, device/browser, and network logs.

Current core providers include Vercel for hosting/infrastructure and AI Gateway functionality, Supabase for authentication/database services, and Stripe for payment processing. Additional processors may be used for functions such as physical fulfillment when enabled.

6. Your saved Regulation Navigator data

Assessment responses and Navigator’s Log entries are associated with your authenticated account. Access rules are designed so signed-in users can read their own rows rather than another member’s saved history.

From the Account page, you can permanently delete:

  • your saved Assessment/Profile history;
  • your saved Navigator’s Log history; or
  • both histories together.

Deleting those histories does not by itself delete your authentication account, membership, billing records, purchase records, or records we may need to retain for security, transaction, fraud-prevention, tax/accounting, dispute, or legal purposes.

Full account deletion is available from Account. It permanently removes the Regulation Navigator login and user-linked Navigator data. If recurring Stripe billing is still set to renew, deletion is blocked until that subscription is scheduled to cancel. Transaction/gift records that may need to be retained for fulfillment, accounting, fraud prevention, disputes, or legal obligations are detached from the deleted user ID rather than automatically erased.

7. Retention

Saved assessment and log information remains associated with your account until you delete it or it is removed as part of account administration. Membership, payment-event, gift, fulfillment, security, and transaction records may be retained for longer periods when reasonably necessary for the purpose for which they were collected, to maintain the integrity of paid access, resolve disputes, prevent fraud, or meet applicable legal/accounting obligations.

We aim not to retain personal information longer than reasonably necessary for its stated purpose.

8. Security

We use access controls, authenticated requests, row-level database restrictions for user-owned data, server-side membership verification for protected member content, and payment-webhook verification as part of the service’s security design. No internet service can guarantee absolute security.

If you believe your account has been accessed without permission, sign out, secure the email/account credentials connected to the service, and avoid entering additional sensitive information until the issue is resolved.

9. Sensitive and health-related information

Some information you choose to enter may concern emotions, stress, regulation, relationships, or wellness and may feel sensitive. Regulation Navigator is an educational self-regulation product, not a medical-record system or healthcare provider portal. Do not use it as the sole place to store information needed for medical treatment, emergency response, or clinical records.

Because consumer health and wellness information can be subject to privacy and security rules beyond traditional medical-record laws, our data practices are designed around collecting only what the product needs and giving members deletion controls for core personal history.

10. Children and teens

Regulation Navigator is designed for people age 16 and older and is not intended for children under 13. If you are under the age of legal majority where you live, use the service only as permitted by applicable law and with parent or guardian involvement when required.

11. Changes to this notice

We may update this notice as Regulation Navigator’s features, processors, or legal obligations change. The “Last updated” date will be revised when material changes are published.

This notice is intended to describe the product’s actual data practices in plain language. It should be reviewed by qualified privacy counsel before broad public launch, particularly as availability expands across jurisdictions.

Account & Data Controls Terms of Use Safety & Scope